CVE-2026-8452

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Aug 27, 2026

Description

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
NetScalerADC>= 14.1, < 72.61; >= 13.1, < 63.18; >= 14.1 FIPS, < 72.61; >= 13.1 FIPS and NDcPP, < 37.272
NetScalerGateway>= 14.1, < 72.61; >= 13.1, < 63.18

References

Timeline

Published
Jun 30, 2026
Last modified
Aug 27, 2026
Added to CISA KEV
Aug 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-845209.8A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to CVE-2026-845215.5A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27,CVE-2026-845225.9A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access senCVE-2026-845235.5An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOSCVE-2026-845244.3An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, maCVE-2026-845255.5A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.CVE-2026-845264.3An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOSCVE-2026-845275.5A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS SequoiaCVE-2026-845283.3A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 2CVE-2026-845303.3An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iCVE-2026-845316.2An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27.CVE-2026-845325.4An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS